Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.2 views

CVE-2026-24550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kaira Blockons blockons allows Stored XSS.This issue affects Blockons: from n/a through = 1.2.19...

6.5CVSS5.9AI score0.00064EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:22 a.m.4 views

CVE-2023-24550

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2023 All versions V223.0Update2. The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in t...

7.8CVSS7.1AI score0.00062EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 p.m.4 views

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

7.2CVSS7.3AI score0.00972EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/04/25 11:48 p.m.1 views

CVE-2025-24550

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JobScore Job Manager job-manager-by-jobscore allows Stored XSS.This issue affects Job Manager: from n/a through = 2.2...

6.5CVSS5.9AI score0.00532EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:48 p.m.9 views

CVE-2025-24550 WordPress Job Manager plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JobScore Job Manager job-manager-by-jobscore allows Stored XSS.This issue affects Job Manager: from n/a through = 2.2...

6.5CVSS0.00532EPSS
Exploits0References1
CVE
CVE
added 2025/04/17 3:48 p.m.38 views

CVE-2025-24550

CVE-2025-24550 affects the WordPress Job Manager plugin by JobScore (versions n/a through 2.2). The issue is an Improper Neutralization of Input During Web Page Generation, resulting in Stored XSS. Multiple connected sources corroborate a stored XSS vulnerability in the plugin before or at versio...

6.5CVSS5.9AI score0.00532EPSS
Exploits0References1
NVD
NVD
added 2024/11/22 9:15 p.m.9 views

CVE-2024-8844

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

5.5CVSS0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/22 9:5 p.m.10 views

CVE-2024-8844 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS6.1AI score0.00098EPSS
Exploits0References1
CVE
CVE
added 2023/02/14 10:36 a.m.58 views

CVE-2023-24550

Solid Edge heap-based buffer overflow CVE-2023-24550 affects Solid Edge SE2022 (all versions) and SE2023 (all versions) via parsing of specially crafted PAR files, enabling potentially code execution in the current process. The root cause is a heap-buffer issue during PAR file parsing. Siemens Pr...

7.8CVSS7.6AI score0.00062EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/04/15 10:33 p.m.1 views

CVE-2022-24550

creationtimestamp| type| source ---|---|--- 2022-04-15 22:33:59+00:00| seen| https://t.me/cibsecurity/40953...

7.8CVSS7.7AI score0.00432EPSS
Exploits0References1
NVD
NVD
added 2022/04/15 7:15 p.m.18 views

CVE-2022-24550

Windows Telephony Server Elevation of Privilege Vulnerability...

7.8CVSS0.00432EPSS
Exploits0References1
CVE
CVE
added 2022/04/15 7:4 p.m.130 views

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

7.8CVSS8.6AI score0.00432EPSS
Exploits0References1Affected Software8
Cvelist
Cvelist
added 2022/04/15 7:4 p.m.19 views

CVE-2022-24550 Windows Telephony Server Elevation of Privilege Vulnerability

...

7.8CVSS8.8AI score0.00432EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:0 a.m.72 views

KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)

The remote Windows host is missing security update 5012653. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26798, CVE-2022-26801, CVE-2022-26786, CVE-2022-24549, CVE-2022-26794,...

10CVSS8.1AI score0.92562EPSS
Exploits23References54
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:0 a.m.111 views

KB5012670: Windows 8.1 and Windows Server 2012 R2 Security Update (April 2022)

The remote Windows host is missing security update 5012639 or cumulative update 5012670. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...

10CVSS8.1AI score0.92562EPSS
Exploits23References66
Circl
Circl
added 2021/08/23 4:22 p.m.2 views

CVE-2021-24550

creationtimestamp| type| source ---|---|--- 2021-08-23 16:22:54+00:00| seen| https://t.me/cibsecurity/27681...

7.2CVSS7AI score0.00972EPSS
Exploits2References1
OSV
OSV
added 2021/08/23 12:15 p.m.0 views

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

7.2CVSS7.1AI score0.00972EPSS
Exploits2References2
Cvelist
Cvelist
added 2021/08/23 11:10 a.m.12 views

CVE-2021-24550 Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

7.5AI score0.00972EPSS
Exploits2References2
CVE
CVE
added 2021/08/23 11:10 a.m.39 views

CVE-2021-24550

CVE-2021-24550 affects the WordPress Broken Link Manager plugin (versions ≤ 0.6.5). The issue arises because the plugin does not sanitize, validate, or escape the url GET parameter before using it in a SQL statement when retrieving the URL to edit, causing an authenticated SQL injection. Root cau...

7.2CVSS7.2AI score0.00972EPSS
Exploits2References2Affected Software1
CVE
CVE
added 2021/03/31 9:32 p.m.70 views

CVE-2020-24550

CVE-2020-24550 refers to an open redirect vulnerability in EpiServer Find prior to version 13.2.7 . The issue is exploitable via the _t_redirect parameter in crafted URLs (e.g., a /find_v2/_click URL), allowing an attacker to redirect users to untrusted websites. The nuclei template confirms the ...

6.1CVSS6.1AI score0.65886EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder